1

kernel: 2.6.18-308.8.2.0.1.el5 - net bonding: fix carrier detect when bond is down orabug 12377284 - mm fix hugetlb page leak Dave McCracken orabug 12375075 - fix ia64 build error due to add-support-above-32-vcpus.patchZhenzhong Duan - x86 use dynamic vcpuinfo remap to support more than 32 vcpus...

VMSA-2012-0009 : ESXi and ESX patches address critical security issues (uncredentialed check)

The remote VMware ESX/ESXi host is affected by the following security vulnerabilities : - ESX NFS traffic parsing vulnerability: Due to a flaw in the handling of NFS traffic, it is possible to overwrite memory. This vulnerability may allow a user with access to the network to execute code on the...

RedHat Update for scsi-target-utils RHSA-2011:0332-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for scsi-target-utils RHSA-2011:0332-01

Check for the Version of scsi-target-utils OpenVAS Vulnerability Test RedHat Update for scsi-target-utils RHSA-2011:0332-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

kernel security and bug fix update

2.6.18-308.8.1.el5 - net sock: validate datalen before allocating skb in sockallocsendpskb Jason Wang 816290 816106 CVE-2012-2136 - net tg3: Fix VLAN tagging assignments John Feeney 817691 797011 - net ixgbe: do not stop stripping VLAN tags in promiscuous mode Andy Gospodarek 809791 804800 - s390...

kernel security and bug fix update

2.6.32-220.17.1.el6 - scsi fcoe: Do not switch context in vportdelete callback Neil Horman 809388 806119 2.6.32-220.16.1.el6 - Revert: x86 Ivy Bridge kernel rdrand support Jay Fenlason 800268 696442 2.6.32-220.15.1.el6 - net SUNRPC: We must not use listforeachentrysafe in rpcwakeup Steve Dickson...

VMware Player Multiple Vulnerabilities (VMSA-2012-0009)

The VMware Player install detected on the remote host is 3.x earlier than 3.1.6, or 4.0.x earlier than 4.0.3 and is, therefore, potentially affected by the following vulnerabilities : - Memory corruption errors exist related to the RPC commands handler function which could cause the application t...

VMware Workstation Multiple Vulnerabilities (VMSA-2012-0009)

The VMware Workstation install detected on the remote host is 7.x earlier than 7.1.6 or 8.0.x earlier than 8.0.3 and is, therefore, potentially affected by the following vulnerabilities : - Memory corruption errors exist related to the RPC commands handler function which could cause the applicati...

CVE-2012-2450

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service invalid write operation and VMX process...

Design/Logic Flaw

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service invalid write operation and VMX process...

CVE-2012-2450

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly register SCSI devices, which allows guest OS users to cause a denial of service invalid write operation and VMX process...

CVE-2012-2450

CVE-2012-2450 covers VMware products (Workstation 8.x before 8.0.3, Player 4.x before 4.0.3, Fusion 4.x before 4.1.2, ESXi/ESX 3.5–5.0) with an improper handling/registration of SCSI devices. The flaw enables an untrusted guest user with admin privileges to trigger an out‑of‑bounds memory write, ...

VMSA-2012-0009 : VMware Workstation, Player, Fusion, ESXi and ESX patches address critical security issues

a. VMware host memory overwrite vulnerability data pointers Due to a flaw in the handler function for RPC commands, it is possible to manipulate data pointers within the VMX process. This vulnerability may allow a guest user to crash the VMX process or potentially execute code on the host...

VMware ESXi/ESX patches address critical security issues (VMSA-2012-0009)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0009. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMSA-2012-0009 VMware Workstation, Player, ESXi and ESX patches address critical security issues

The remote ESXi is missing one or more security related Updates from VMSA-2012-0009. Summary VMware Workstation, Player, ESXi and ESX patches address critical security issues Relevant releases Workstation 8.0.2 Player 4.0.2 Fusion 4.1.2 ESXi 5.0 without patch ESXi500-201205401-SG ESXi 4.1 without...

kernel security, bug fix, and enhancement update

2.6.18-308.4.1.el5 - net ipv6: fix skb double free in xfrm6tunnel Jiri Benc 752305 743375 CVE-2012-1583 2.6.18-308.3.1.el5 - net be2net: cancel beworker during EEH recovery Ivan Vecera 805462 773735 - net be2net: add vlan/rx-mode/flow-control config to besetup Ivan Vecera 805462 773735 - x86...

1

2.6.18-308.4.1.0.1.el5 - net bonding: fix carrier detect when bond is down orabug 12377284 - mm fix hugetlb page leak Dave McCracken orabug 12375075 - fix ia64 build error due to add-support-above-32-vcpus.patchZhenzhong Duan - x86 use dynamic vcpuinfo remap to support more than 32 vcpus Zhenzhon...

VMware ESXi/ESX patches and VI Client update resolve multiple security issues (VMSA-2011-0009.3)

The remote ESXi is missing one or more security related Updates from VMSA-2011-0009.3. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

kernel: possible privilege escalation via SG_IO ioctl

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...